ALLIBABU BATHINI
SUMMARY:
8 years of experience in Network/System Administration and Network Security Engineer/Information Security Analyst In-depth knowledge of deploying and troubleshooting LAN, WAN, Frame-Relay, Ether-channel, IP Routing Protocols - (RIPV2, OSPF, EIGRP & BGP), NAT, VLAN, STP, VTP, HSRP & GLBP Strong hands on experience in layer-3 Routing and layer-2 Switching. Dealt with Cisco router models like 7200, 3800, 3600, 2800, 2600, 2500, 1800 series, Cisco catalyst 6500, 4500, 3750, 3500, 2900 series switches, Juniper routers E, J, M & T-Series and Juniper EX switches EX8200, EX4500, EX4200, EX3200, EX2500, EX2200 Series Experience in installing, configuring and troubleshooting of Checkpoint Firewall and Juniper SSG series.
Expertise in installing, configuring, and maintaining Cisco Switches (2900, 3500, 3700 series, 6500 series).
Expertise in installing, configuring, and troubleshooting of Cisco Routers (3800, 3600, 2800, 2600, 1800, 1700, 800) and Juniper EX Switches (EX2200, EX2500, EX3200, EX4200, EX4500, EX8200 series).
Configuring RIP, OSPF, EIGRP, BGP, MPLS, QOS, ATM and Frame Relay.
Experience in configuring, implementing and troubleshooting F5 load balancer in the enterprise network Experience on Check Point Firewalls NG, NGX, NG R55, NGX 60, NGX R65, R70, R75, UTM Migration with both Checkpoint and Cisco ASA VPN experience.
Experience in deploying and maintain Cisco PIX and ASA firewalls Designed and implemented various project with Cisco PIX firewall. Extensively worked on Cisco PIX 506/515E and 525 Migrated and implemented new solutions with Cisco ASA Firewall series 5505, 5510, 5512-X
TECHNICAL SKILLS
Cisco & other vendor equipment’s
Cisco Routers (7200, 3800, 3600, 2800, 2600, 2500, 1800, 1700 series) & Cisco Catalyst switches (6500, 4900, 3750, 3500, 2900 series). Juniper Routers (E, J, M & T-Series). Juniper EX Switches (EX8200, EX4500, EX4200, EX2500, EX2200 Series). PIX Firewall (506/515/525/535), ASA Firewall (5505/5510). Cisco ACE Load Balancers.
Routing Protocols
RIP, RIP V2, EIGRP, OSPF, IS-IS, IGRP, BGP, MPLS
Switching Protocols
VTP, STP, RSTP, MSTP, VLANs, Ether Channel, LACP, VSS, MLS Load Balancing Protocols
HSRP, GLBP, VRRP
IP Services Management
NAT, DHCP
LAN technologies
Ethernet, Fast Ethernet, Gigabit Ethernet, & 10 Gigabit Ethernet, Wi-Fi, FDDI, Token Rings WAN technologies
Frame Relay, ISDN, ATM, MPLS, leased lines & exposure to PPP, DS1, DS3, OC3, T1 /T3 & SONET Firewalls
Check Point Nokia Firewalls IP350, IP550 & IP750, Juniper Net screen, Firewalls ISG 1000/2000, Cisco PIX 505/515E/525 & ASA 5500 Series Security
IPsec, IPsec VPNs, GRE over IPsec
AAA Protocols
RADIUS, TACACS+
Infrastructure services
DHCP, DNS, SMTP, FTP, TFTP
Load Balancer
CISCO CSS, F5 Networks
Administration & Troubleshooting
CDP, TELNET, SSH, ICMP, PING and TRACEROUTE, SNMP and SYSLOG, CISCO IOS software and configurations.
Network Monitoring Tools
Wireshark, TCPDUMP, Packet Sniffer
PROFESSIONAL EXPERIENCE
CKE Restaurant, Anaheim, CA Feb 2015-Present
Network Security Engineer
Configuring and implementing of composite Network models consists of Cisco7600, 7200, 3800 series routers and Cisco 2950, 3500, 5000, 6500 Series switches Configured Nexus 7010 including NX-OS Virtual Port Channels, Nexus port profiles, Nexus Version 4.2 and 5.0, Nexus VPC peer links Participated in the installation, configuration, and post installation daily operational tasks and configuration of the deployment of Cisco Nexus equipment Designed 10 gigabit networks using Cisco Nexus 7000 series switches, and Cisco 3800 series routers Worked with application teams to configure ASM policies from concept to protection.
Protected over 200 applications to date with positive and negative security policies.
Developed and deployed self-service model using Splunk to allow application teams to review and request ASM policy modifications via ASM logs Managed rules on Cisco checkpoint NGX firewall
Worked with Juno OS and Juniper M&T series switches
Worked with Cisco ACE GSS 4400 Series global site selector Appliances. networks using routing protocols such as RIP, OSPF, BGP and manipulated routing updates using route-map, distribute list and administrative distance Configured, upgraded, and troubleshoot Cisco Sourcefire, and Palo Alto firewalls and IPS sensors for various customers and oversaw configuration backups and signature pack deployment.
Configured OSPF redistribution and authentication with type 3 LSA filtering to prevent LSA flooding Deployed Cisco Sourcefire Firewalls and Palo Alto Firewalls for SCADA control sites.
Configured OSPF over frame relay networks for NBMA and point to multipoint strategies Implementing traffic engineering on top of an existing Multiprotocol Label Switching (MPLS) network using Frame Relay and Open Shortest Path First (OSPF).
Experience in working with Network automation tools and testing for network change and configuration management.
Experience with Security- Firewalls, NAT / PAT, IPSEC, S2S.
Worked with MPLS to improve HYPERLINK "http://searchunifiedcommunications.techtarget.com/definition/QoS-Quality-of-Service" quality of service (QoS) by defining LSPs that can meet specific HYPERLINK "http://searchitchannel.techtarget.com/definition/service-level-agreemen" service level agreements (SLAs) on traffic HYPERLINK "http://whatis.techtarget.com/definition/latency" latency, HYPERLINK "http://searchunifiedcommunications.techtarget.com/definition/jitter" jitter, packet loss and HYPERLINK "http://whatis.techtarget.com/definition/uptime-and-downtime" downtime.
Implemented various OSPF scenarios on networks consisting of 7600 routers Configured policy based routing for BGP for complex network systems Worked with Nagios for monitoring of network services ( HYPERLINK "http://en.wikipedia.org/wiki/Simple_Mail_Transfer_Protocol" \o "Simple Mail Transfer Protocol" SMTP, HYPERLINK "http://en.wikipedia.org/wiki/Post_Office_Protocol" \o "Post Office Protocol" POP3, HYPERLINK "http://en.wikipedia.org/wiki/Hypertext_Transfer_Protocol" \o "Hypertext Transfer Protocol" HTTP, HYPERLINK "http://en.wikipedia.org/wiki/Network_News_Transfer_Protocol" \o "Network News Transfer Protocol" NNTP, HYPERLINK "http://en.wikipedia.org/wiki/Internet_Control_Message_Protocol" \o "Internet Control Message Protocol" ICMP, HYPERLINK "http://en.wikipedia.org/wiki/Simple_network_management_protocol" \o "Simple network management protocol" SNMP, HYPERLINK "http://en.wikipedia.org/wiki/File_Transfer_Protocol" \o "File Transfer Protocol" FTP, HYPERLINK "http://en.wikipedia.org/wiki/Secure_Shell" \o "Secure Shell" SSH).
Primary responsibility is to design and deploy various network security & High Availability products like Cisco ASA other security products Worked on FTP, HTTP, DNS, DHCP servers in windows server-client environment with resource allocation to desired Virtual LANs of network.
Provided full visibility and notification of authorized and unauthorized network access with integration of CISCO ASA/FWSM and NAC solution Installed, configured and set security policies on cisco and checkpoint firewalls, VPN Analyzed and tested network protocols (Ethernet, TCP/IP) using Wireshark tool.
Environment: Cisco ACE, Cisco Nexus, Cisco Switches, F5 Load-balancer, Cisco Sourcefire, Juniper Switches, Palo Alto Firewalls Atos, Irvine, CA Oct 2013- Jan 2015
Network Engineer
working with Nexus 7010, 5548, 5020, 2148, 2248 devices.
Implementing and maintaining Network Management tools (Solar Winds, Cisco Works) Enabled STP attack mitigation (BPDU Guard, Root Guard), using MD5 authentication for VTP, disabling all unused ports and putting them in unused VLAN and ensuring DHCP attack prevention where needed Implementation, configuration & troubleshooting the issues related to Virtual Servers, pools, nodes & certificates on F5 Load Balancer.
Help customers build scalable, resilient, and high-performance applications and services on AWS Implementing for new iRule creation as per the client request.
Experience with deploying the Layer 3 MPLS VPN in all the Branches and Campus locations.
IOS upgrade in Nexus 7010 through ISSU (In service software upgrade) Provided redundancy in a multi homed Border Gateway Protocol (BGP) network by tuning AS-path.
Involved in the modification and removal (wherever necessary) of BGP from the MPLS routers.
Responsible for Checkpoint firewall management and operations across our global networks.
Conversions to BGP WAN routing to convert WAN routing from OSPF to BGP (OSPF is used for local routing only) which involves new wan links.
Configuring RIP, OSPF and Static routing on Juniper M and MX series routers.
Configuring Nexus 2000 Fabric Extender (FEX) which acts as a remote line card for the Nexus 5000.
Designed, validated and implemented LAN, WLAN & WAN solution to suite client’s needs.
Configured and designed LAN networks with Access layer switches such as Cisco 4510, 4948, 4507 switches.
Designed and configured the commands for QoS and Access Lists for Nexus 7K and 5K.
Worked on Layer 2 protocols such as STP, VTP, STP, RSTP, PVSTP+, MST and other VLAN troubleshooting issues and configuring switches from scratch and deployment Configured Cisco ASA 5510 Firewall to establish logical separation between legacy network & lab environment.
Experience with project documentation tools & implementing and maintaining network monitoring systems and experience with developing network design documentation and presentations using VISIO.
Configuring, monitoring and troubleshooting Cisco's ASA 5500/PIX security appliance, Failover, DMZ zoning, & Configuring VLANs/routing/NATing with the firewalls as per the design.
WAN Pilot project to convert branch from dual T1 circuits to iWAN only broadband circuit. To Enable Internet WAN connectivity for the Lab in Hauppauge. Test and turn-up IWAN link and disable the 2 existing T1 circuits, running branch on IWAN only. After testing was completed site will be placed back on either dual TDM circuits or TDM with IWAN backup circuit.
Experience on designing and troubleshooting of complex BGP and OSPF routing problems.
Implementation of AWS.
Involved in configuring IP Quality of service (QoS).
Environment: Nexus devices, F5 Load balancer, Cisco devices, Layer 3 issues, Checkpoint Firewall, QOS, IPSEC VPN, WAN Molina Health care, Long beach, CA Mar 2013 – Sep 2013 Network Engineer
Design, test and deploy IT security systems and solutions.
Configured Multiprotocol Label Switching (MPLS) VPN with Routing Information Protocol (RIP) on the customer’s site Negotiate VPN tunnels using IPsec encryption standards and configured and implemented site-to-site VPN, Remote VPN.
Tuned BGP internal and external peers with manipulation of attributes such as metric, origin and local preference.
Supports the implementation and ongoing operations of network access control devices to include firewalls, web proxies, and SSL VPN devices.
Develop security engineering requirements, standards and guidelines, processes and procedures Implementing and managing Checkpoint Provider 1.0 Scalable security management for multi-domain environments.
Plan, design and test the application migration from F5 load balancer to new A10 load balancers.
Configuring Virtual Server, Service Groups and Load balancing methods in new A10 LTM.
Worked on fixing various custom health monitors and templates like LDAP in A10 load balancers.
Continuous monitoring of CPU utilization, link utilization, connection table utilization Upgrading checkpoint firewall and fixing hot fixes and patches.
Migrated Juniper EX series switches to Cisco 3500 series and 6500 series switches.
Configuring, maintaining and troubleshooting network related issues.
Working on Checkpoint Firewalls in providing access to the customers or external vendor networks in reaching the internal servers.
Enabling the TCP, UDP, SMTP ports to allow the traffic between the servers.
Troubleshooting the issues by coordinating with Tier-2 deployment team and with customers.
Performing NAT for the traffic flows going from internal network to external network.
Configuration and troubleshooting of Site to Site as well as Remote Access VPN on Cisco ASA and Check Point firewalls.
Device management: Firewalls, IPS (ASA, Sourcefire, Palo Alto, Fortinet, Firepower) SSH to devices to troubleshoot.
Deployment of Palo Alto firewall into the network. Configured and wrote Access-list policies on protocol based services.
Researched, designed, and replaced aging Checkpoint firewall architecture with new next generation Palo Alto appliances serving as firewalls and URL and application inspection.
Configured and maintained IPSEC and SSL VPN's on Palo Alto Firewalls.
Implemented Zone Based Firewall and Security Rules on the Palo Alto Firewall Configuring rules and Maintaining Palo Alto Firewalls & Analysis of firewall logs Environment: Juniper EX switches, Cisco Switches, Checkpoint, NAT, Palo Alto firewalls, F5 & A10 Load balancer, NAT, Firewall IPS Innvectra Softech, Hyderabad, India March 2009 – Jan 2013 Sr. Network Engineer
Handled network devices such as Switches (Cisco Catalyst 2900 and 3500 series), Routers (Cisco 2600, 2800 and 7200 series), Firewalls, Load balancers etc.
Configuring Virtual Device Context in Nexus 7010.
Configuring, upgrading and verifying the NX-OS operation system.
Configuring IP, RIP, EIGRP, OSPF and BGP in routers.
Implemented Voice VLANS, UDP, SIP, and RTP and provide QOS by DSCP and IP Precedence.
Used DHCP to automatically assign reusable IP addresses to DHCP clients.
Implementation and configuration of F5 Big-IP LTM-6400 load balancers.
Integrate VoIP with PSTN and setup voice Gateway ensuring QOS for Cisco based Voice over IP and CDR for voice call Accounting.
Configuration and extension of VLAN from one network segment to other network segment between different vendor switches (Cisco, Juniper).
Automated network implementations and tasks and designed monitoring tools using python scripting.
Experience in working with Cisco Nexus 2148 Fabric Extender and Nexus 5000 series to provide a flexible Access Solution for a datacenter access architecture.
Design and implement campus switch network with Cisco Layer 3 switches (3750, 4500, and 6500) in multi VLANs environment and inter-VLAN routing, HSRP, ISL trunk, ether channel.
Designed MPLS VPN and QoS for the architecture using Cisco multilayer switches Implement Cisco Works 2000 device to manage Cisco routers, switches, PIX and ASA firewall, Access Points, Concentrators.
Maintain Security policy by monitoring PIX firewalls (515 and 520).
Worked on Cisco Firewalls, Cisco PIX (506E/515E/525) & ASA 5500(5510/5540) Series.
Environment: Cisco Catalyst switches, Juniper switches, Cisco PIX, VoIP, Routing Protocols Vertex Data Private Limited, Hyderabad, India Jun 2008 – Feb 2009 Network Operations Engineer
Troubleshoot and monitored routing protocols such OSPF, EIGRP & BGP.
Troubleshoot guidelines for MPLS VPN and in customer escalations and troubleshoot issues related to connectivity, STP, VLAN, Trunking, VTP, Layer 2/3 switching, Ether channels, Inter-VLAN routing, log messages, high CPU utilization and parameters that can degrade performance of network.
Administered Frame-Relay and networks and assisted in configuring ACL & NAT through CLI.
Technical support and problem solution for the LAN and its environment.
Experience with protocols such as Frame Relay, IEEE 802.11 and VLAN, OSPF and BGP, DNS, DHCP, FTP, NTP, SNMP, SMTP and TELNET.
Installed configured (through CLI & SDM) and managed CISCO routers and Catalyst switches.
Set up internet, implementing networking products like Servers, Proxy servers, Switches, Firewalls, Routers.
Ensured standard router and switch configurations are maintained and responsible for capacity planning, contingency planning & disaster recovery.
LAN Segments monitoring/troubleshooting LAN related issues and periodic backup of Router/ Switch Configurations.
Monitoring the NMS system for different Network Alerts.
Performed switching technology administration including VLANs, inter-VLAN routing, Trunking, STP, RSTP, Port Aggregation & link negotiation.
Environment: VLAN, Trunking, VTP, Telnet, Sify TAC
EDUCATION:
Bachelor of Technology ANU, India